All Apps and Add-ons

SNMP event

punithjigali
Explorer

How to configure Univesal fowarder to send snmp traps in unix server and how to collect?
whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance?
can we use syslog for snmp traps??

0 Karma

PavelP
Motivator

Hello @punithjigali ,

to send snmp traps from a linux host:

  • install and configure snmp to send traps independently from splunk
  • configure script input to run snmptrap command periodically

how to collect SNMP described here: https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/SendSNMPeventstoSplunk

whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance? - it depends on where you want to capture SNMP input - on Indexer or on HF, on UF too, but you have to configure it manually, because UF has no UI.

can we use syslog for snmp traps - yes, snmp deamon can collect traps and write them to log, and syslog can read this log and send events to Splunk. Alternatevely UF can read the log and send events to Splunk.

There are many options, choose what suits you best.

Let me know if it helps

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...